From afc0cb35a6a15289c5ec240361fdff66d81a822a Mon Sep 17 00:00:00 2001 From: Peter Palfrader Date: Fri, 10 Sep 2010 13:15:56 +0200 Subject: [PATCH] kerberos kadmind access from draghi --- modules/ferm/manifests/per-host.pp | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/modules/ferm/manifests/per-host.pp b/modules/ferm/manifests/per-host.pp index 193d701c3..c7e6479a1 100644 --- a/modules/ferm/manifests/per-host.pp +++ b/modules/ferm/manifests/per-host.pp @@ -153,6 +153,16 @@ class ferm::per-host { description => "kerberos KDC", rule => "&SERVICE(udp, kpasswd)", } + @ferm::rule { "dsa-krb-kadmind": + domain => "(ip ip6)", + description => "kerberos kadmind access from draghi", + rule => "&SERVICE_RANGE(tcp, kerberos-adm, 82.195.75.106)", + } + @ferm::rule { "dsa-krb-kadmind-v6": + domain => "(ip ip6)", + description => "kerberos kadmind access from draghi", + rule => "&SERVICE_RANGE(tcp, kerberos-adm, 2001:41b8:202:deb:216:36ff:fe40:3906)", + } } } -- 2.20.1